General

  • Target
    2026-08-20_ffcc49c4ecfb080d94ca6176c0c601c7_elex_wannacry
  • Size 20KB
  • Sample260820-yqzrwavanf
  • SHA256 3155d3423b12ef00d812880671a0800595d30265fdc8e1c26110292d259902dc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-20_ffcc49c4ecfb080d94ca6176c0c601c7_elex_wannacry
    • Size 20KB
    • SHA256 3155d3423b12ef00d812880671a0800595d30265fdc8e1c26110292d259902dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Waski payload

    • Family: Waski

      Waski is a trojan downloader written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks